Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/028937-8903-495d-bc6c-f3e915ad3802/1/XfJyIcGPyv50iSvA6Xv17nw0T6c.mft
File: XfJyIcGPyv50iSvA6Xv17nw0T6c.mft (raw, json)
Hash identifier: BQLy1qfnF/DMYzlt89tvYnMbdJLXmvWi3MYSfjtyqYw=
Subject key identifier: 4E:01:29:04:5C:E0:0E:03:A7:4B:1F:3B:22:3F:0A:6B:69:0F:B9:5F
Authority key identifier: 5D:F2:72:21:C1:8F:CA:FE:74:89:2B:C0:E9:7B:F5:EE:7C:34:4F:A7
Certificate issuer: /CN=5df27221c18fcafe74892bc0e97bf5ee7c344fa7
Certificate serial: 019D29971090D3D192567FF16F2C858377F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XfJyIcGPyv50iSvA6Xv17nw0T6c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/028937-8903-495d-bc6c-f3e915ad3802/1/XfJyIcGPyv50iSvA6Xv17nw0T6c.mft
Manifest number: 0E73
Signing time: Thu 26 Mar 2026 10:00:59 +0000
Manifest this update: Thu 26 Mar 2026 10:00:59 +0000
Manifest next update: Fri 27 Mar 2026 10:00:59 +0000
Files and hashes: 1: WIz4ju7mKgyhClPjYmZVPgV4tVg.roa (hash: bp+DO940zxxbXrDgbAxxoKvL8L9u5E+uFAMTt7Qg4XQ=)
2: XfJyIcGPyv50iSvA6Xv17nw0T6c.crl (hash: tB50ajn3tUX21ZG3YBq+m6uFMyrNjzOGEBsjqHwTs/I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/028937-8903-495d-bc6c-f3e915ad3802/1/XfJyIcGPyv50iSvA6Xv17nw0T6c.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/028937-8903-495d-bc6c-f3e915ad3802/1/XfJyIcGPyv50iSvA6Xv17nw0T6c.mft
rsync://rpki.ripe.net/repository/DEFAULT/XfJyIcGPyv50iSvA6Xv17nw0T6c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:97:10:90:d3:d1:92:56:7f:f1:6f:2c:85:83:77:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5df27221c18fcafe74892bc0e97bf5ee7c344fa7
Validity
Not Before: Mar 26 10:00:59 2026 GMT
Not After : Mar 27 10:00:59 2026 GMT
Subject: CN=4e0129045ce00e03a74b1f3b223f0a6b690fb95f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:97:54:b1:61:22:b6:45:50:a9:a2:93:87:49:
bb:f2:35:ef:3f:12:31:c6:d5:c4:11:ab:6f:d1:21:
77:7c:cd:20:e4:f0:f5:76:e6:35:2c:30:76:2f:ea:
a9:28:84:40:76:1f:31:e3:6d:e3:ca:63:aa:90:e5:
c4:2a:00:4e:0a:b9:80:8d:c9:ad:47:a1:99:fa:a0:
82:0d:40:f0:9c:61:34:19:b1:57:b0:e1:32:3a:80:
f6:6a:cb:b4:86:3e:c3:7d:bf:bf:81:27:3d:54:6c:
98:32:18:31:f7:d7:29:f1:ad:80:0b:7c:ae:84:0a:
17:2b:44:27:cf:a7:ed:39:b7:1b:08:6d:a1:a8:40:
01:cc:70:71:55:a7:af:f0:a4:fa:8b:f6:78:30:b6:
82:14:13:0e:e0:17:cd:45:e8:80:cd:9a:e8:6b:fa:
48:d8:bc:fc:38:c4:36:11:a3:22:7b:ab:37:88:65:
51:e9:14:1b:f4:4c:55:27:c1:40:d5:a5:b6:80:52:
ca:d0:cc:e2:36:c5:8d:69:2b:28:4d:0c:c4:31:de:
3c:78:fb:67:1f:26:20:52:85:28:2d:3f:bf:91:b7:
27:83:5f:f3:ff:86:b4:e3:c6:72:89:6e:ce:b2:cf:
2f:9e:c1:92:48:88:b3:a7:aa:66:bd:8c:82:48:b0:
76:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:01:29:04:5C:E0:0E:03:A7:4B:1F:3B:22:3F:0A:6B:69:0F:B9:5F
X509v3 Authority Key Identifier:
keyid:5D:F2:72:21:C1:8F:CA:FE:74:89:2B:C0:E9:7B:F5:EE:7C:34:4F:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XfJyIcGPyv50iSvA6Xv17nw0T6c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/028937-8903-495d-bc6c-f3e915ad3802/1/XfJyIcGPyv50iSvA6Xv17nw0T6c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/028937-8903-495d-bc6c-f3e915ad3802/1/XfJyIcGPyv50iSvA6Xv17nw0T6c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:03:d9:92:17:44:87:f9:d2:86:93:17:da:01:aa:d4:b6:7b:
d7:57:e3:87:1f:03:3c:b4:e1:b0:d7:7e:24:2f:ab:90:c3:c7:
ad:a5:82:02:dc:0f:13:6b:a7:82:e7:df:95:ba:30:92:80:0a:
54:6b:43:68:0e:1c:67:a3:7b:7e:91:b3:55:66:51:fd:b3:ea:
04:3e:60:f0:44:e3:46:70:26:eb:3a:b8:e2:a9:5a:6e:b2:47:
72:3f:7b:55:99:00:a0:df:be:66:91:5c:56:e1:2e:97:0d:fe:
bf:7a:a0:ed:48:58:c8:2d:96:5a:d7:51:3b:5c:b4:56:41:eb:
7a:15:8a:b0:6f:ad:5a:e5:b7:5c:79:74:01:c3:63:e4:1b:e1:
ff:70:92:e2:7f:eb:a9:6e:8b:a0:74:d0:d1:70:28:56:af:d7:
4f:f0:06:5b:17:04:f1:56:45:43:ec:5c:1b:c1:6d:5a:0c:fb:
f3:85:17:e3:d5:4d:32:77:d8:9c:19:01:f2:6d:f5:6b:bd:0e:
9c:29:bb:9c:aa:29:57:aa:e9:3b:18:ad:95:dd:87:1e:b9:75:
69:16:38:3c:25:fb:9d:32:85:29:80:a4:65:e1:8a:99:83:9e:
af:dd:83:c4:09:1d:e9:0d:86:ee:09:68:c3:6e:a5:80:15:aa:
85:65:8c:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:59:10 2026 by rpki-client